Can it detect keys for specific cloud providers?

Yes, it is pre-configured to recognize patterns for major cloud providers including AWS, Azure, and Google Cloud, as well as common SaaS API keys.

How does the Secret Scanner find exposed credentials?

It uses a combination of regex-based pattern matching for known service keys (like AWS or Stripe) and entropy analysis to identify high-randomness strings likely to be passwords or private keys.

Does this skill automatically remove the found secrets?

No, it identifies the locations and provides remediation steps so you can safely rotate or remove the secrets manually without breaking your application.

When is the best time to use the secret-scanner skill?

It is best used proactively before committing changes to version control, during security reviews, or when onboarding a new codebase.

Secret & Credential Scanner

Name: Secret & Credential Scanner
Author: BbgnsurfTech

byBbgnsurfTech

•

Security & Testing

Identifies and remediates exposed secrets, API keys, and credentials within codebases using advanced pattern matching and entropy analysis.

About

The Secret & Credential Scanner skill empowers Claude to perform deep security audits of your repositories to prevent sensitive data leaks. By scanning for hardcoded passwords, AWS keys, private SSH keys, and other sensitive credentials, it helps developers catch vulnerabilities before they are committed to version control or deployed to production. It provides actionable reports that pinpoint exact file locations and offer clear remediation strategies, ensuring your applications remain secure and compliant with modern security standards.

Key Features

Comprehensive security reporting with precise file path locations
3 GitHub stars
Entropy analysis to detect high-randomness strings and potential passwords
Targeted scanning of configuration files, scripts, and environment variables
Advanced pattern matching for common API keys and service credentials
Proactive remediation guidance for revoking and rotating secrets

Use Cases

Identifying hardcoded passwords in legacy configuration and environment files
Auditing a repository before making a public commit or production deployment
Scanning for accidental inclusions of private SSH, PGP, or SSL keys

About

Key Features

Comprehensive security reporting with precise file path locations
3 GitHub stars
Entropy analysis to detect high-randomness strings and potential passwords
Targeted scanning of configuration files, scripts, and environment variables
Advanced pattern matching for common API keys and service credentials
Proactive remediation guidance for revoking and rotating secrets

Use Cases

Identifying hardcoded passwords in legacy configuration and environment files
Auditing a repository before making a public commit or production deployment
Scanning for accidental inclusions of private SSH, PGP, or SSL keys